apiVersion: v1
kind: Pod
metadata:
  name: nginx-proc-mount-disallowed
  namespace: testns
  annotations:
    container.apparmor.security.beta.kubernetes.io/nginx: unconfined
  labels:
    app: nginx-apparmor
spec:
  ephemeralContainers:
    - name: nginx
      image: nginx
      securityContext:
        seccompProfile:
          type: "Unconfined"
